A consortium wants to use a blockchain-based PKI to manage certificates for a supply chain network. They need to support certificate revocation. What is a key challenge they will face?

Revocation is not possible in a blockchain PKI

Blockchain cannot store certificate data

Revocation information may be delayed due to blockchain consensus times

Blockchain PKI requires a central authority to manage revocation

In asymmetric cryptography, what is the role of the key pair?

One key encrypts data and the other key decrypts it, and they are mathematically related

The public key is kept secret and the private key is shared

One key is used for encryption and the other is used for key storage only

Both keys are identical and used interchangeably for encryption and decryption

Which of the following is the most appropriate method for generating a cryptographic key?

Selecting a key from a list of common passwords

Using a cryptographically secure random number generator (CSPRNG)

Deriving the key from the user's name and birth date

Using a standard pseudo-random number generator (PRNG) seeded with the current time

What is a major security and privacy concern associated with key escrow?

The escrow agent will slow down encryption operations

The escrow agent will make the keys publicly available

The escrow agent will require users to change their passwords frequently

The escrow agent could misuse the keys to access private communications

When should an organization consider rotating a cryptographic key?

Only when the algorithm is no longer supported by the vendor

Only when the key is physically damaged

After a suspected or confirmed key compromise

Only when the key is used for the first time

Systems Security Certified Practitioner

Domain 5Objective 4

5.4 - Understand Public Key Infrastructure (PKI) SSCP Practice Questions (Page 4)

Part of the Cryptography domain, which accounts for 9% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–7 in this domain), expect 1–2 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

11concepts

9%of the exam

Questions 16–20

16expert · hard
A consortium wants to use a blockchain-based PKI to manage certificates for a supply chain network. They need to support certificate revocation. What is a key challenge they will face?
Select an answer first
17foundation · easy
In asymmetric cryptography, what is the role of the key pair?
Select an answer first
18foundation · easy
Which of the following is the most appropriate method for generating a cryptographic key?
Select an answer first
19foundation · easy
What is a major security and privacy concern associated with key escrow?
Select an answer first
20foundation · easy
When should an organization consider rotating a cryptographic key?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.